Privacy statement

We are pleased that you are visiting our website and accordingly about your interest in our company and our products. Hymer GmbH & Co. KG takes the protection of your private data very seriously and we would like you to feel at ease when visiting our
website. For this reason, the protection of your personal rights and privacy are also a major concern for us when processing personal data, one which we take into account in our business processes.

The following data protection information incorporates both the current regulatory framework defined by the German Federal Data Protection Act (BDSG) and the specifications of the EU General Data Protection Regulation (GDPR) valid throughout
Europe. We process the personal data collected when you visit our website in accordance with the applicable data protection regulations, and in particular the GDPR. Your data will not be published by us, nor transferred to any third parties without
your consent. In the following sections, we describe the data that we collect when you visit our website and how precisely it is used.

The websites of the Hymer GmbH & Co. KG can contain links to websites of other providers to which this privacy statement does not apply. We have no knowledge of which possible data are collected by the operators of these sites and we have no influence
on this either. You can obtain information in the data protection notice of the respective site.

"Processing" is each activity carried out with or without the help of automated processes or each such series of activities in connection with personal data such as the collection, entry, organisation, arrangement, storage, adjustment or change, the
reading out, request, use, disclosure by transmission, distribution or any other form of provision, the comparison or the linking, the restriction, erasure or destruction.

"Data subject" is each identified or identifiable natural person, whose personal data are processed by the data controller responsible for the processing.

"Data controller" is the natural person or legal entity, authority, institution or other body, which makes the decision alone or jointly with others about the purposes and means of the processing of personal data. If the purposes and means of this
processing are stipulated by Union law or the law of the member states then the data controller respectively the certain criteria of his appointment can be envisaged according to Union law or the law of the member states.

"Contract data processor" is a natural person or legal entity, authority, institution or other body that processes personal data by order of the data controller.

"Recipient" is a natural person or legal entity, authority, institution or other body to which personal data are disclosed, irrespective whether it concerns a third party or not. Authorities, which possibly receive personal data within the scope of
a certain investigation order according to Union law or the law of the member states, shall however not be deemed as recipients.

"Third party" is a natural person or legal entity, authority, institution or other body, apart from the data subject, the data controller, the contract data processor and the persons, who are authorised to process the personal data under the direct
responsibility of the data controller or the contract data processor.

"Consent" is each announcement of intention unmisunderstandably submitted voluntarily by the data subject for the certain case in an informed manner in the form of a declaration or any other clear, confirming act, with which the data subject gives
to understand that he or she agrees with the processing of the personal data relating to them.

Collection and processing of personal data

A use of our websites is principally possible without entering any personal data. If you would like to use special services of our company via our website it could however be necessary to process personal data. If it is necessary to process personal data
and if there is no statutory basis for such a processing we will generally obtain the consent of the data subject.

2. Anonymous data collection

You can visit our site without actively providing any details relating to your person. However, we will automatically store access data each time the website is called (server log files) such as e.g. the name of your internet service provider, the used
operating system, the website, from which you visit us, the date and the duration of the visit or the name of the requested file, as well as for security reasons, e.g. for the recognition of attacks on our websites, the IP address of the used computer
for the duration of 7 days. These data are exclusively evaluated for improving our offer and do not allow any conclusions to be drawn about your person. These data will be not aggregated with other data sources. The legal basis for the processing
of the data is Art. 6 Para. 1 GDPR. We process and use the data for the following purposes: 1. Provision of the websites of the Hymer GmbH & Co. KG, 2. Improvement of our websites and 3. Prevention and recognition of errors/malfunctions as well as
of misuse of the websites. The data processing of this kind is carried out either to fulfil the contract via the use of the websites of the Hymer GmbH & Co. KG or we pursue a legitimate interest in ensuring the functionality and the error-free operation
of the websites of the Hymer GmbH & Co. KG as well as adjusting these websites to the requirements of the users.

3. Use of cookie tracking

We use so-called cookies on our websites in order to make the visit to our website attractive and to enable the use of certain functions. This concerns a standard internet technology for the storage and to call login and other use-related information
for all users of the websites of the Hymer GmbH & Co. KG. Cookies are small text files, which are placed on your terminal device, they enable us among others to store user settings so that our websites can be displayed in a format that is customised
for your device. Several of the cookies used by us are deleted again after the end of the browser session, therefore after your browser is closed (so-called session cookies). Other cookies remain on your terminal device and enable us or our partner
companies to recognise your browser the next time you visit the website (so-called permanent cookies). You can set your browser so that you are informed about the setting of cookies and can make individual decisions about their acceptance or exclude
the acceptance of cookies for certain cases or generally. The cookies can furthermore be deleted subsequently in order to remove data that websites have filed on your computer. You can find an instruction for this purpose quickly in the internet.
The deactivation of the cookies can lead to several restrictions to the functionality of the websites of the Hymer GmbH & Co. KG.

Deactivate or remove cookies (Opt-Out)

Each web browser offers possibilities in order to restrict and delete cookies. You can find further information in this respect on the following websites:

4. Retargeting/Remarketing

4.1. Retargeting/remarketing by Adform Germany GmbH

Hymer GmbH & Co. KG uses the retargeting technology provided by Adform Germany GmbH, Großer Burstah 50-52, 20457 Hamburg (“Adform”). This makes it possible to target users of the Hymer GmbH & Co. KG website that have already demonstrated an interest in
the offers provided by Hymer GmbH & Co. KG with personalised, interest-related advertising. Advertising material is displayed in accordance with a cookie-based analysis of previous user behaviour, which does not involve the collection of any personal
data.

Where retargeting technology is used, a cookie is stored on the user’s computer or mobile device in order to collect anonymised interest-related data, which allows the advertising to be individually adapted to the stored information. These cookies are
small text files that are saved on the user’s computer or mobile device. This means that the user sees advertising that is more likely to correspond to his/her particular product and information interests. The user can permanently opt out of cookie
setting for advertising preferences by downloading and installing the browser plug-in available at the following link:
https://site.adform.com/privacy-center/platform-privacy/opt-out/. If all cookies are turned off, this may lead to certain functions on our website becoming
unusable. Further information, and the data protection regulations relating to Adform, can be viewed here:
https://site.adform.com/privacy-center/overview

4.2. Retargeting/Remarketing by the Facebook network

Remarketing tags used by the social network Facebook, 1601 South California Avenue, Palo Alto, CA 94304, USA have been incorporated into our website. When you visit our website, the remarketing tags are used to create a direct link between your browser
and the Facebook server. This means that Facebook is informed that you have visited our website with your IP address. This allows Facebook to attribute the visits to our website to your user account. This also allows us to create a “Facebook Lookalike
Audience” via Facebook using the data – a target group of individuals with specific characteristics that they share with visitors to our website. We can then reach individuals who have not yet interacted with our website, who might also be interested
in our products. We can use the information collected in this way to display Facebook ads. Please note that in our capacity as website provider we do not receive any information regarding the content of the data transmitted or how it is used by Facebook.
Further information about this can be found in the Facebook Data Policy at https://www.facebook.com/about/privacy/.

If you do not wish for any data to be collected via Custom Audience, you can deactivate this here.

4.3. Retargeting / Remarketing by ORTEC Adscience B.V.

Hymer GmbH & Co. KG uses the retargeting technology provided by ORTEC Adscience B.V., Condensatorweg 54, 1014 AX Amsterdam (“ORTEC Adscience”). This makes it possible to target users of the Hymer GmbH & Co. KG website that have already demonstrated an
interest in the offers provided by Hymer GmbH & Co. KG with personalised, interest-related advertising. Advertising material is displayed in accordance with a cookie-based analysis of previous user behaviour, which does not involve the collection
of any personal data.

Where retargeting technology is used, a cookie is stored on the user’s computer or mobile device in order to collect anonymised interest-related data, which allows the advertising to be individually adapted to the stored information. These cookies are
small text files that are saved on the user’s computer or mobile device. This means that the user sees advertising that is more likely to correspond to his/her particular product and information interests.

You have the option of permanently opting out of cookie setting on ORTEC Adscience’s website. To do this, click on the link “Click here to opt-out” at the bottom of this page:
https://www.ortecadscience.com/privacy-policy/. When you activate the link, a browser plug-in will be downloaded and installed, which will prevent data from being collected.
If all cookies are turned off, this may lead to certain functions on our website becoming unusable.

5. Conversion measurement on our website

5.1. Use of Bing-Ads

We use the Universal Event Tracking (UET) of Microsoft Bing Ads. This service is made available by Microsoft Corporation ("Microsoft"), One Microsoft Way, Redmond, WA 98052-6399, USA. This enables us to track the activities of our users if our website
is reached via a Microsoft-Bing advertisement. If users come to our website via such an advertisement a cookie will be set on your computer.

A Bing UET-Tag is integrated on our website. This is a code, through which in connection with the cookie, several non-personal data are stored regarding the use of the website. These include among others the dwell time on the website, which areas of the
website were called and via which advertisement the users reached the website. No information is entered that relates to your identity. The entered information will be transferred to servers of Microsoft in the USA and principally stored there for
a maximum of 180 days. You can prevent the entry of the data generated by the cookie and which refer to your use of the website as well as the processing of these data by deactivating the setting of cookies. This can under certain circumstances restrict
the functionality of the website. You can find further information pertaining to the analysis services of Bing on the website of Bing Ads under:
https://help.bingads.microsoft.com/#apex/3/de/53056/2. You can find further information relating to the data protection at Microsoft and Bing in the data protection
provisions of Microsoft under:
https://privacy.microsoft.com/de-de/privacystatement

With your consent, we use the “Visitor Action Pixel” provided by Facebook Inc., 1601 S. California Ave, Palo Alto, CA 94304, USA (“Facebook”) on our website. We can use this to monitor user actions after the user has seen a Facebook advertisement or clicked
on it. It allows us to record the effectiveness of Facebook advertisements for statistical and market research purposes. The data collected in this way is anonymous to us, which means that we cannot see personal data assigned to individual users.
This data is, however, saved and processed by Facebook, which we will inform you of according to the information we have. Facebook is able to link this data with your Facebook account and to use it for its own advertising purposes in accordance with
the Facebook Data Policy https://www.facebook.com/about/privacy/. It allows Facebook and its partners to place advertisements within and outside Facebook. For these purposes, a cookie may also be stored on your computer. This consent may only be provided
by users aged over 18 years.

6. Google applications

6.1. Use of Google Analytics

This website uses functions of the web analysis service Google Analytics. Anbieter ist die Google Inc.,1600 Amphitheatre Parkway Mountain View, CA 94043, USA. Google Analytics uses so-called "cookies", text files that are stored on your computer and enable
an analysis of your use of the website. The information generated by the cookies regarding your use of this website (including your IP address) is transferred to a server of Google in the USA and stored there. Google will use this information to evaluate
your use of the website in order to compile reports on the website activities for the website operators and to provide further services associated with the website use and the internet use. Google will also, if applicable, transfer this information
to third parties if this is stipulated by law or insofar as third parties process these data by order of Google.

Prevent storage of the cookies

You can prevent the storage of the cookies by a corresponding setting of your browser software; however we would like to point out that in this case you will, if applicable, not be able to use all functions of this website in full. By the use of this
website you declare that you agree with the processing of the data collected about you by Google in the manner as described above and for the previously mentioned purpose.

IP-anonymisation

We have activated the function IP anonymisation on this website. This way your IP address is abbreviated by Google within member states of the European Union or in other contracting states of the Treaty on the European Economic Area before transmission
to the USA.

Objection against the data entry

If you do not want Google to receive data from your browser when calling the sites you will find the link to the Opt-Out solution for Google Analytics here:
http://tools.google.com/dlpage/gaoptout?hl=de , this plugin prevents the browser requesting the Analytics-Code so that Google does not receive any data whatsoever when the
site is called. The plugin is only available for the Microsoft Internet Explorer 11, Google Chrome, Mozilla Firefox, Apple Safari and Opera. According to Google the browser blocks the Google Analytics Script after the installation. You can find more
detailed information pertaining to the conditions of use and data protection under
http://www.google.com/analytics/terms/de.html respectively under
http://www.google.com/intl/de/analytics/privacyoverview.html. We would like to point out to you that Google Analytics was extended by the “gat.anonymizeIp”
code on this website in order to guarantee an anonymised entry of IP addresses (so-called IP masking).

If you do not wish for Google Analytics to collect any data, it can be deactivated here.

Demographic features with Google Analytics

This website uses the function "demographics" of Google Analytics. Reports can be created hereby that contain statements regarding the age, sex and interests of the site visitors. These data stem from interest-related advertising of Google as well as
from visitor data from third party providers. These data cannot be allocated to any certain person. You can deactivate this function at all times via the display settings in your Google account or generally forbid the entry of your data by Google
Analytics as presented in the Point "Objection against data entry".

6.2. Use of Google Remarketing

This website uses the Google Remarketing technology of Google Inc. (1600 Amphitheatre Parkway, Mountain View, CA 94043, USA; "Google"). This concerns retargeting technology, which enables us to address visitors to our website once again by targeted advertising
on the websites of the Google advertising network. The advertising is faded in by using so-called cookies. Cookies are placed on your computer for this purpose, with the help of which third party providers, including Google, record which of our websites
were visited with your browser. With the help of this information our advertisements can then be presented to you at a later time on other websites, e.g. within the scope of the Google search or on websites of the Google network. You can find further
information pertaining to data protection at Google and the functionality of the remarketing under:
https://www.google.de/intl/de/policies/privacy/. You can also deactivate the storage of cookies here by the settings of your browser and/or object to the entry within the
scope of the Google remarketing by the
https://www.google.com/policies/technologies/ads/

6.3. Use of Google AdWords

On our website we use Google Conversion Tracking, an analysis service of Google Inc. (1600 Amphitheatre Parkway, Mountain View, CA 94043, USA; "Google"). A cookie is placed on your computer by Google AdWords in this case ("Conversion Cookie") if you have
reached our website via a Google advertisement. These cookies will cease to be valid after 30 days and do not serve the purpose of personal identification. If you visit certain sites of our company and the cookie has not expired yet we and Google
can recognise that someone has clicked on the advertisement and was therefore forwarded to our site. Each AdWords customer will receive another cookie. Cookies can therefore not be tracked via the websites of AdWords customers. The information obtained
by means of the conversion cookie serves to create conversion statistics for AdWords customers, who have chosen conversion tracking. The AdWords customers will be notified about the total number of users, who have clicked on their advertisement and
were forwarded to a site fitted with a conversion tracking tag. However, they will not receive any information, with which users can be personally identified. Should you not want to take part in the tracking you can object to this use by preventing
the installation of the cookies by a corresponding setting of your browser software (deactivation option). You will then not be included in the conversion tracking statistics. You can find more detailed information pertaining to conditions of use
and data protection under:
http://www.google.de/policies/privacy/.

6.4. Use of Google Maps

We use Google Maps to present maps and to create route maps. Google Maps is operated by Google Inc., 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA. By using this website you declare that you agree with the entry, processing as well as the use
of the automatically collected data as well as the data entered by you by Google, one of its representatives or third party providers. You can find the conditions of use for Google Maps under:
https://www.google.com/intl/de_de/help/terms_maps.html . You can find further details in the data protection center of google.de: Transparency and options as well
as data protection provisions under
https://policies.google.com/privacy?hl=de&gl=de .

6.5. Use of Google DoubleClick

We use DoubleClick by Google. This is a service of Google Inc., 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA ("Google"). DoubleClick by Google uses cookies in order to present you advertisements that are relevant for you. A pseudonymous identification
number (ID) will be allocated to your browser hereby in order to check which advertisements were faded into your browser and which advertisements were called. The cookies do not contain any personal information. The use of the DoubleClick cookies
enables Google and its partner websites to merely place advertisements based on previous visits to our or other websites in the internet. The information generated by the cookies is transferred by Google for evaluation to a server in the USA and stored
there. A transfer of the data by Google to third parties will only take place owing to statutory regulations or within the scope of the contract data processing. In no way will Google aggregate your data with other data entered by Google. You can
prevent the storage of the cookies by a corresponding setting of your browser software; however we would like to point out to you that in this case you will, if applicable, not be able to use all functions of our websites in full. You can find further
details in the data protection center of google.de: Transparency and options as well as data protection provisions under
https://policies.google.com/privacy?hl=de&gl=de.

If you do not wish for any data to be collected by DoubleClick, it can be deactivated here.

6.6. Use of Google Tag Manager

This website uses the Google Tag Manager. Website tags can be managed via an interface through this service. The Google Tool Manager merely implements tags. This means: No cookies are used and no personal data are entered. The Google Tool Manager triggers
off other tags, which on the other hand, if applicable, enter data. However, the Google Tag Manager will not access these data. If a deactivation was carried out on domain or cookie level then it will continue to exist for all tracking tags if these
are implemented with the Google Tag Manager. You can find further details in the data protection center of google.de: Transparency and options as well as data protection provisions under
https://policies.google.com/privacy?hl=de&gl=de.

7. Use of social media

7.1. Use of Facebook

Functions of the Facebook service are integrated into our sites. The provider is Facebook Inc., 1 Hacker Way, Menlo Park, California 94025, USA. If you visit our sites a direct connection will be established between your browser and the Facebook server
via the link. Facebook will hereby receive the information that you have visited our site with your IP address. If you click on the Facebook "Like-button" while you are logged into your Facebook account you can link the contents of our sites to your
Facebook profile. This way Facebook can allocate the visit to our sites to your user account. We would like to point out that we, as the provider of the sites, neither receive any knowledge of the contents of the transmitted data, nor of their use
by Facebook. You can find further information in this respect in the privacy statement of Facebook under
https://de-de.facebook.com/policy.php . If you do not want Facebook to be able to allocate the visit to our sites to your Facebook user account please log-out of your Facebook user
account.

7.2. Use of Twitter

Functions of the Twitter service are integrated on our sites. These functions are offered by Twitter Inc., 1355 Market Street, Suite 900, San Francisco, CA 94103, USA. By using Twitter and the "Re-Tweet" function the websites visited by you are linked
with your Twitter account and announced to other users. Data are also transferred to Twitter hereby. We would like to point out that we, as the provider of the sites, neither receive any knowledge of the contents of the transmitted data, nor of their
use by Twitter. You can find further information in this respect in the privacy statement of Twitter under
https://twitter.com/privacy . You can change your data protection settings at Twitter in the account settings under:
https://twitter.com/account/settings

7.3. Use of YouTube

Our website uses functions of the YouTube site offered by Google. The operator of the sites is YouTube, LLC, 901 Cherry Ave., San Bruno, CA 94066, USA. If you visit one of our sites fitted with a YouTube function, a connection will be established to the
servers of YouTube. The YouTube server is notified which of our sites you have visited. If you are logged into your YouTube account you enable YouTube to allocate your surfing behaviour directly to your personal profile. You can prevent this by logging
out of your YouTube account. You can find further information pertaining to the handling of user data in the privacy statement of YouTube under:
https://www.google.de/intl/de/policies/privacy .

7.4. Use of Spotify

Functions of the music service Spotify are integrated on our sites. The provider is Spotify AB, Birger Jarlsgatan 61, 113 56 Stockholm in Sweden. You can recognise the Spotify functions by the green logo on our site. You can find an overview of the Spotify
functions under https://developer.spotify.com. A direct connection between your browser and the Spotify server can be established hereby when visiting our sites via these functions. Spotify receives the information hereby that you have visited our
site with your IP address. When you click on the Spotify button while you are logged into your Spotify account you can link the contents of our sites to your Spotify profile. Spotify can hereby allocate the visit to our sites to your user account.
You can find further information in this respect in the privacy statement of Spotify:
https://www.spotify.com/de/legal/privacy-policy/ . If you do not want Spotify to be able to allocate the visit to our sites to your Spotify user account please log-out
of your Spotify user account.

7.5. Our Social Media Websites

Hymer GmbH & Co. KG is represented on various social media platforms with its own website. Should you now comment, like or twitter something, etc. and you are logged into your respective account at this time, it is if applicable possible for the social
medium to allocate your visit to our website to you and to your user account. Where applicable, the social medium is informed about the IP address you have used to visit our website or social media website. We would like to point out to you that we
as the provider of the sites neither have any knowledge of the contents of the transmitted data, nor their use.

For the purpose and scope of the data collection and the further processing and use of the data by the providers as well as their rights in this respect and setting options for the protection of your personal data please refer to the data protection notices
of the respective providers:

If you do not want the respective social medium to be able to allocate the visit to our site to your respective account then you must log-out of the respective service before you visit our website.

8. Website services

8.1. Registration on the website

You have the possibility to register on our website. The purpose of the registration is to offer the data subject contents or services which, due to the nature of the matter, can only be offered to registered users. We will hereby collect the following
data: form of address, first and last name, e-mail address, telephone number, address, etc. the details which are marked as mandatory fields, are necessary for the registration, details beyond this are provided voluntarily and can be revoked at all
times.

By a registration on our website furthermore the IP address allocated by the Internet-Service-Provider (ISP) to the data subject, the date as well as the time of the registration are stored. These data are stored against the background that only this
way can the misuse of our services be prevented, and these data, if required, enable committed criminal offences to be clarified. Insofar the storage of these data is necessary for our protection. A forwarding of these data to third parties is principally
not carried out if there is no statutory obligation for the forwarding or the forwarding serves criminal prosecution.

Registered persons have the possibility to change the personal data entered during the registration at all times or to have these erased completely from the data stocks by us, insofar as this is not opposed by any statutory storage obligations.

8.2. Contact form/enquiries

On our site you have the possibility to send us enquiries by using the contact form. Your details from the contact form (contacts of your enquiry, subject of your enquiry and date) including the contact data entered by you there (first name, last name,
company, phone number and e-mail) will be stored in our company for the purpose of processing the enquiry and for the event of follow-up questions. We will not transfer this data without your consent. The legal basis for the collection and processing
of the data is Art. 6 Para. 1 GDPR.

The data entered by you in the contact form will remain in our company until you request us to erase these, revoke your consent for the storage or the purpose for the data storage ceases to apply (e.g. after completed processing of your enquiry). Mandatory
statutory provisions– in particular storage deadlines– shall remain unaffected.

8.3. Registration Form Driving Safety Training

On our website, you have the option of registering for driving safety training using the online form. We have appointed BKP GmbH, Münchner Str. 24, 85774 Unterföhring to carry out driving safety training.

During registration for driving safety training, the details you have provided on the contact form (content of your request, subject and date of your request), including your contact details (title, first name, surname, company, address, telephone number
and email), are saved by us for the purposes of processing the registration and in the event of any follow-up questions, and forwarded to the operator. The legal basis for the collection and processing of data is Art. 6 Para. 1 GDPR.

The data that you have provided on the registration form will be kept by us until you ask us to cancel it, you withdraw consent for storage or the reason for storing the data no longer applies (e.g. once registration has been fully processed). Any mandatory
statutory provisions – in particular retention periods – remain unaffected by this.

We have no control over any additional data about you that may be collected by the operator beyond the registration form. Please contact the operator directly regarding this.

8.4. Contact Form Appointments and Configuration Questions for Business Partners.

On our website, you have the option of arranging a test run or inspection appointment with an authorised business partner identified on our website, or sending a configuration to one of the business partners, using the online form.

For this purpose, the details you have provided on the contact form (contact of your request, subject and date of your request), including your contact details (title, first name, surname, company, address, telephone number and email), are saved by us
for the purpose of agreeing an appointment, preparing an offer and in the event of any follow-up questions, and forwarded to the business partner. The legal basis for the collection and processing of data is Art. 6 Para. 1 GDPR.

The data that you have provided on the online form will be kept by us until you ask us to cancel it, you withdraw consent for storage or the reason for storing the data no longer applies (e.g. once the appointment has been fully processed). Any mandatory
statutory provisions – in particular retention periods – remain unaffected by this.

We have no control over any additional data about you that may be collected by the business partner beyond the registration form. Please contact the appropriate business partner directly regarding this.

8.5. Request for information material (brochures, price lists etc.)

On our website you have the possibility to by online form to request information material relating to our products and services.

Your details from the order form including the contact data entered by you there (title, first name, last name, company, address, phone number and email) will be stored in our company for the purpose of processing your order and for the event of follow-up
questions and forwarded to the contract data processor commissioned by us to send the documents We do not forward these data to third parties without your consent. The legal basis for the collection and processing of the data is Art. 6 Para. 1 GDPR.

The data entered by you in the online form will remain in our company until you request us to erase these, revoke your consent for the storage or the purpose for the data storage ceases to apply (e.g. after a reached agreement of a date). Mandatory statutory
provisions – in particular storage deadlines – shall remain unaffected.

If you grant your consent to the forwarding of your data to a trading partner your data will be forwarded to an authorised trading partner. The legal basis for the collection and processing of the data is Art. 6 Para. 1 GDPR. We have no influence on data,
which the trading partner collects from you beyond the order form.

8.6. E-mail contact

If you send us enquiries by e-mail or information your details (e-mail address, contents of your e-mail, subject of your e-mail and date) including the contact data entered by you there (first name, last name, if applicable phone number, address) will
be stored by us for the purpose of processing the enquiry and for the event of follow-up questions. We will not forward these data without your consent. The legal basis for the collection and processing of the data is Art. 6 Para. 1 GDPR.

The user is pointed out that e-mails on the transmission channel may be read or changed without authorisation and unnoticed. The Hymer GmbH & Co. KG uses software to filter unsolicited e-mails (spam filter). E-mails can be rejected by the spam filter
if these have been falsely identified as spam by certain features.

The data entered by you will remain in our company until you request us to erase these, revoke your consent for the storage or the purpose for the data storage ceases to apply (e.g. after the completed processing of your enquiry). Mandatory statutory
provisions – in particular storage deadlines – shall remain unaffected.

8.7. Competitions/special actions

On our site you have the possibility to take part in competitions and/or special actions. You hereby take part voluntarily and irrespective of the other offers of our website. With the registration for the competition you will send us your e-mail address
(and if applicable first and last name, phone number, date of birth, address). The purpose of the collection – unless otherwise indicated in the conditions of participation of the particular competition/particular action – is to execute the competition
as well as to determine the winner and to send the prize. The legal basis is Art. 6 Para. 1 GDPR. Further data are not collected or only on a voluntary basis.

However, the participants hereby declare that they agree to make first names (last name only with the first letter) including photos available in the event that they win a prize for editorial texts.

We will only store the data entered by you until the competition is finished. Mandatory statutory provisions – in particular storage deadlines – shall remain unaffected.

8.8. Subscription to our newsletters

On our website you have the possibility to subscribe to the newsletter of our company. We hereby inform our customers and business partners at regular intervals about offers of the company. For this purpose we need a valid e-mail address from you as well
as information which permits us to check that you are the holder of the entered e-mail address sand agree with the receipt of the newsletter. Further data are not or only collected on a voluntary basis. A confirmation mail will be sent to the e-mail
address entered by a data subject for the first time for the sending of the newsletter for legal reasons in the Double-Opt-In procedure. We exclusively use these data for the sending of the newsletter and do not forward these data to third parties.
The legal basis for the collection and processing of the data is Art. 6 Para. 1 GDPR.

With the registration to the newsletter we further store the IP address allocated by the Internet-Service-Provider (ISP) of the computer system used by the data subject at the time of the registration as well as the date and the time of the registration.
The collection of these data is necessary in order to be able to comprehend the (possible) misuse of the e-mail address of a data subject at a later time and serves therefore for our protection. You can revoke the granted consent for the storage of
the data, the e-mail address as well as their use for sending the newsletters at all times, for example via the "unsubscribe"/"de-registration" link in each newsletter. Alternatively you are also welcome to send your unsubscription wish at all times
to
info@hymer.com by e-mail. The lawfulness of the already carried out data processing will remain unaffected by the revocation. The data deposited by you in our company for the purpose of the newsletter subscription
will be stored by us until your removal from the newsletter and erased after the unsubscription of the newsletter.

Newsletter-Tracking

The newsletters contain so-called tracking pixels. A tracking pixel is a miniature graphic that is embedded in such e-mails, which are sent in HTML format, in order to enable a log file recording and a log file analysis This way a statistical evaluation
of the success or failure of online marketing campaigns can be carried out. On the basis of the embedded tracking pixel we can recognise whether and when an e-mail was opened by a data subject and which links in the e-mail were called by the data
subject.

Such personal data collected via the tracking pixel contained in the newsletters will be stored by us owing to the legitimate interest and evaluated in order to optimise the sending of the newsletter and to adjust the contents of future newsletters even
better to the interests of the data subject. The legal basis is Art. 6 Para. 1 GDPR.

8.9. Career zone/online application

On our site you have the possibility to use the career section and/or to submit applications by e-mail. The personal data (master data, contact data, annexes such as cover letters, curriculum vitae, references and certificates etc.) of applicants will
be collected and processes for the purpose of processing the application procedure. The processing can also be carried out using electronic means. This is in particular the case if an applicant transmits corresponding application documents for example
per e-mail or via a web form located on the website, to the data controller responsible for the processing. If the data controller responsible for the processing concludes an employment contract with an applicant the transmitted data will be stored
for the purpose of the processing of the employment relationship by complying with the statutory regulations. If an employment contract is not concluded by the data controller responsible for the processing with the applicant the application documents
will be deleted automatically six months after the announcement of the rejection decision if a deletion is not opposed by any other legitimate interests of the data controller responsible for the processing. Other legitimate interests within this
meaning is for example an evidence obligation in proceedings according to the General Equal Treatment Act (AGG). The legal basis for the collection and processing of the data is Art. 6 Para. 1 GDPR.

Applicant pool

With the online application you have the possibility to explicitly consent that we may store and use your data beyond the current application procedure. With this consent we can then inform you with new job adverts or free positions that are interesting
for you.

9. Transmission of Data

9.1. Transmission internally within the Hymer GmbH & Co. KG

We transmit your data internally to the administration, Human Resoures department, works council and wage department in order to satisfy our contractual or statutory obligations. A data transmission or disclosure of your data shall only be carried out
in the extent that is necessary for this purpose by complying with the relevant data protection regulations.

9.2. Transmission across the group

The Hymer GmbH & Co. KG is a company that operates worldwide and is based in Germany. The data, which you transmit to us, will be stored in in Germany and forwarded within the group for the purpose of administration. Should an exchange of the data be
carried out within the Group, this takes place to fulfil a contract or as a condition of use for the websites. Moreover, there may an interest in forwarding these data for internal, administrative purposes. Should the processing of your data take
place outside of Europe this transmission will take place by complying will all applicable data protection laws and particularly pursuant to Art. 44 et seq. GDPR.

9.3. Transmission to third parties

We transmit your data to certain third parties in order to be able to make corresponding applications and services available (so-called "contract data processors"), which provide external services for us. For example newsletter services, IT-providers,
event agencies, lettershops, tax office, etc. A transmission to further third parties may, if applicable, take place in order to fulfil our obligations (authorities, banks, social insurance funds, etc.). Third parties process the data only pursuant
to our instructions, moreover they are forbidden from using these data for own commercial purposes, which do not correspond with the agreed purposes.

We must disclose personal data if we are obligated to do so within the scope of ongoing court proceedings, owing to disposition, statutory or owing to applicable law (Art. 6 Para. 1 lit. f GDPR). We only forward your personal data, if:

the forwarding according to Art. 6 Para. 1 S. 1 lit. f GDPR is necessary for the assertion, exercising or defence of legal claims and there is no reason to assume that you have a prevailing interest that is worthy of protection in the non-forwarding
of your data,

for the event that a statutory obligation exists for the forwarding according to Art. 6 Para. 1 S. 1 lit. c GDPR, as well as

this is permitted by law and according to Art. 6 Para. 1 S. 1 lit. b GDPR is necessary for the processing of contractual relationships with you.

Should the processing of your data take place outside of Europe, this transmission will take place by complying will all applicable data protection laws and particularly pursuant to Art. 44 et seq. GDPR.

9.4. Transmission to a third country or international organisation

We transmit your data to countries outside of the EU or the EEA (so-called third countries) owing to the aforementioned purposes (trransmission group-wide (No. 4.2) and transmission to third parties (No. 4.3)). The transmission will only take place for
carrying out our contractual and statutory obligations or owing to your consent. This transmission will take place by complying with all applicable data protection laws and particularly pursuant to Art. 44 et seq. GDPR. In particular either owing
to issued adequacy resolutions of the European Commission or owing to certain guarantees (for example standard data protection clauses, etc.).

A transmission to an international organisation does not take place.

10. Existence of an automated decision-making including profiling

As a responsible company we waive an automatic decision making or a profiling.

11. Duration of the storage

We principally store your data as long as this is necessary to provide our services or if this was envisaged by the European legislator of directives and regulations or another legislator in laws or regulations, which the data controller responsible for
the processing is subject to. In all other cases we erase your personal data after settlement of the purpose, with the exception of those data, which we must continue to store in order to fulfil legal obligations (e.g. we are obligated owing to tax
and commercial law storage obligations to keep documents in reserve such as e.g. contracts and invoices for a certain period of time).

12. Technical security

The Hymer GmbH & Co. KG uses technical and organisational security measures in order to protect your data managed by us against accidental or wilful manipulations, loss, destruction or against the access of unauthorised persons. Our security measures
are continuously improved in line with the technological development. For security reasons and to protect the transfer of confidential contents, such as for example the enquiries, which you send to us as the operator of the sites, this site uses an
SSL encryption (Secure Socket Layer) in conjunction with the respective maximum level of encryption that is supported by your browser. As a rule, this is a 256-bit encryption. If your browser does not support any 256-bit encryption we use instead
128-bit v3 technology. You can recognise whether an individual page of our internet presence is transferred encrypted by the fact that the address line of the browser shifts from "http://" to "https://" and by the lock symbol in your browser line.

When the SSL encryption is activated the data, which you transmit to us, cannot be read by third parties.

We would like to point out that the data transmission in the internet (e.g. with the communication per e-mail) may feature security gaps. A consistent protection of the data against the access by third parties is not possible.

13. The legal basis of the processing

Art. 6 I lit. a GDPR serves our company as the legal basis for processing activities, with which we obtain a consent for a certain processing purpose.

If the processing of personal data is necessary to fulfil a contract, of which the data subject is a contractual party, as this for example is the case with processing activities, which are necessary for a delivery of goods or the provision of any other
service or consideration, then the processing is based on Art. 6 I lit. b GDPR. The same shall apply to those processing activities which are necessary to carry out pre-contractual measures, for example in cases of enquiries for our products or services.

If our company is subject to a legal obligation, through which a processing of personal data becomes necessary, such as for example to fulfil tax obligations then the processing is based on Art. 6 I lit. c GDPR. In rare cases the processing of personal
data could be necessary in order to protect vital interests of the data subject or another natural person. This would be the case, for example, if a visitor were injured in our company and subsequently his name, his age, his health insurance details
or other vital information had to be forwarded to a doctor, a hospital or other third party. Then the processing would be based on Art. 6 I lit. d GDPR.

In the end processing activities could be based on Art. 6 I lit. f GDPR. Processing activities are based on this legal basis, which are not covered by any of the aforementioned legal bases if the processing is necessary to safeguard a legitimate interest
of our company or a third party, if the interests, basic rights and basic freedoms of the data subject do not prevail. If the processing of personal data is based on Article 6 I lit. f GDPR our legitimate interest is to carry out our business activity
for the benefit of the wellbeing of all of our employees and our customer.

Statutory or contractual regulations for the provision of the personal data; necessity for the conclusion of the contract; obligation of the data subject to make the personal data available; possible consequences of the non-provision

We will inform you that the provision of personal data may partly be stipulated by law (e.g. tax regulations) or also for contractual regulations (e.g. details relating to the contractual partner). Among others it may be necessary for the conclusion of
a contract that a data subject makes personal data available to us, which must be subsequently processed by us. The data subject is for example obligated to make personal data available to us if our company concludes a contract with him. A non-provision
of the personal data would result in the fact that the contract could not be concluded with the data subject. Before a provision of personal data by the data subject the data subject must contact one of our employees. Our employees will explain to
the data subject relating to the individual case whether the provision of the personal data is stipulated by law or by contract or is necessary for the conclusion of the contract, whether an obligation exists to make the personal data available, and
which consequences the failure to provide the personal data would have.

14. Minor reference

This online offer is not aimed at children below the age of 16. Persons, who have not yet reached the age of 16, may, without the consent of the legal guardians, not transmit any personal data to the Hymer GmbH & Co. KG.

15. Rights of the data subjects

You have the right to information about the data stored by us, duration of the data, purpose and legal basis of the storage as well as origin and recipients of transmissions. Incorrect data are to be rectified, inadmissibly stored data or no longer required
data are to be erased. Moreover the data subject has a right to object to restriction of the processing as well as the right to data portability.

This information will be created at your request. This information is free.

You additionally have the right to lodge a complaint directly at a supervisory authority.

16. Revocation of your consent to the data processing

Several data processing activities are only possible with your explicit consent. You have the possibility to revoke an already granted consent at all times. For this purpose an informal notification to
datenschutz@hymer.com per e-mail to us is sufficient. The lawfulness of the data processing carried out until the revocation will remain unaffected by the revocation.

17. The responsible body and contact data of the external data protection officer